Hello, has anyone seen issues with cattle-cluster-agent on downstream clusters getting SSL certificate issues when connecting to the git.rancher.io charts, because they're behind a proxy? I understand you need to give the workload our internal CA certs, I'm just wondering what the best way to go about doing this is. Docs mention giving certs to the main rancher deployment using the tls-ca-additional Secret, but nothing for downstream clusters.